[Samba] Mandriva Upgrade / Migration path from 3.0.14a
I'm upgrading my Samba/LDAP DC since Mandrake 10.2 is now Mandriva 2006. Any specific issues not discussed in the change logs I should know about ahead of time? Jim C. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba problems - looks like a bug in client
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim, the windows ME and 98 boxes have no problems in reading/writing to the server. It's only the linux boxes that have problems. I could try any/all of these, but it seems to me that they are mainly aimed at windows sharing. Am I right? FWIW, we have had a working mixed lan for 3 years, I'm afraid you are. Most, if not all, of my experience is in this area. without using a wins server. Anne Excrement. I miss-understood the documentation. It should be off unless you do sub-netting. OK then I guess I owe you an apology. I'm at the limits of what I know here. Beyond this, all I can tell you is to try line-by-line commenting/changing in your smb.conf until you find the culprit. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCq9HmB4AhF6wVFMERAk6lAKCPR7nJAraOGNRsx8ZpdqU7FMdghgCdEnRU EJh0N7O+9fVAG2d4oyoIbUQ= =52yI -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba problems - looks like a bug in client
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [global] log file = /var/log/samba/log.%m smb passwd file = /etc/samba/smbpasswd load printers = yes name resolve order = hosts lmhosts bcast Thought of adding wins to name resolve order? In mine, I have this: [EMAIL PROTECTED] ~]# grep wins /etc/samba/smb.conf name resolve order = wins hosts bcast wins support = Yes Docs say it should be on anyway but for some reason it defaults to no. lmhosts is the client side ( 'doze ) hosts file. The Windows equivalent of /etc/hosts. Consequently adding it to my resolve order shouldn't cause trouble. socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 Comment this out for a test? username level = 8 deadtime = 30 map to guest = bad user encrypt passwords = yes hosts allow = 192.168.0. 127.0.0.1 printer admin = @adm password level = 8 dns proxy = no netbios name = anne-linux Tried changing this for a test? There might be some kind of confusion between the user name and the netbios name. Probably not but it's just a thought. printing = cups printcap name = cups server string = Samba Server %v local master = yes workgroup = lydgate.net Hmmm... I don't have a workgroup on my machine. I wonder how it relates to netbios name? The man pages are not very specific about it. printcap name = cups security = user preferred master = yes max log size = 50 log level = 3 dos charset = 850 unix charset = ISO8859-15 Here is what I've got for this: [EMAIL PROTECTED] ~]# grep charset /etc/samba/smb.conf unix charset = LOCALE [EMAIL PROTECTED] ~]# I don't think you need both public = no and valid users which I've noticed in some of your shares. [homes] comment = Home Directories browseable = yes writable = yes create mode = 0770 . . . [SPREADSHEETS] path = /home/anne/Documents/Spreadsheets comment = /home/anne/Documents/Spreadsheets public = no valid users = anne,david,gillian Check your 'doze clients network connections for a Client for Microsoft Networks. Some other client side stuff to check: Network Connection | Click Properties | Select Internet Protocol ( TCP/IP ) | Click Properties | Click Advanced | Select Wins tab Wins servers in order of use should list your Samba box's IP address. Of course this probably only matters if your Samba box has wins support = Yes. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCqz9zB4AhF6wVFMERAvehAKCjvPlTz1auQsL1wZQxBvR/RhcG1gCgqX5X QYuObkTt6lc09Qx0UR7gwPI= =cG+n -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba problems - looks like a bug in client
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This is a small home LAN - two boxes running Mandriva 2005LE, four assorted ... seeing any difference. I have reverted to 3.0.13. I am seeing huge delays when transferring files direct from an application. ... at all, saying that access is denied. Printing from OOWriter is It's probably timing out meaning that it is taking so long that OOCalc eventually gives up. This would seem to indicate that it's strictly a performance problem of some sort. 1. Post the smb.conf for the server. Use the following procedure: testparm dumpfile.txt[enter][enter]. Edit the file to remove anything that isn't relevant and then paste the remainder into a mail message. 2. Post the client side connection procedure and any errors. exceptionally slow, though this is never as bad from any other application. Are these other applications using smaller files? 1. Command syntax may have changed on you. Always possible. My main problem, though, is in saving files across the lan, direct from apps like gnumeric. Have you considered using an NFS mount in the short term until you get the bugs worked out? It's easy. If you like I can show you how. Shorewall is not installed on this (the client) box, and windows boxes can save correctly, indicating that shorewall on the server is working correctly. OK, but of course I had to ask. 3. File system permissions on your share directories. (test by making it chmod 777) Normally the shared directories are 770, but I have already tested them with 777. The trick to trouble shooting is having a process-of-elimination procedure. If we always do our testing with it chmod 777 we know that it really can't be a permissions issue. We also have to concern ourselves with the possibility that there might be more than one issue as well as the idea that the problems may not be obvious. Since there *might* be a permissions issue that we don't understand we make the share world writable during testing as a matter of procedure. If you have important files in that directory that you want to safeguard, consider creating an empty directory for sharing during the test procedure. :-) With nmap you can check both from the same box: ... need very specific instructions. Do you have nscd running on either of these machines? If not give it a try on both. Do you have DNS on your local network? -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCqcyHB4AhF6wVFMERAoFzAJ9b9OLYKScJ+1IZ+LrIemxXHCZ54wCfW6QR sRx7oKSkP6L8243GiW86m3o= =n1X+ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Why winbind on a Samba Server?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is there any good reason to run Winbind on an Samba LDAP PDC? I've never used winbind before and I'm wondering if there is a reason I should consider learning. I suppose one would be better server debugging. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCpyTbB4AhF6wVFMERAnH+AKD9kPVBV4QSt/u05yttmMcWE8tu9wCeNoT0 l3V30jbaz1JQtYvNAHL0YLU= =tga9 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Help with user/domain Management fm Windows side
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
if you don't want to bother researching what version of smbldap-tools
...
anyone to say is there?
Actually this was a problem but not my fault.
Because of the infamous rpm hell and various changes in Samba and
smbldap-tools (i.e. the underlying perl libraries were a problem ) I was
unable to upgrade without upgrading my entire OS. I had to wait until I
had a suitably large block of time available for this project.
OK, so I've finally been able to do this and I've still got the same old
trouble. I have to say that I am not sure of the perms on the
smbldap-tools. They don't look like they did in previous releases. As
I recall some of them belonged to to the adm group. At the same time, I
can't think of a reason why this setup wouldn't work with other set to
r--x.
So, anyway the new stuff is:
[EMAIL PROTECTED] samba]# rpm -qa | grep samba; rpm -qa | grep smbldap-tools-0
samba-winbind-3.0.14a-2mdk
samba-server-3.0.14a-2mdk
samba-client-3.0.14a-2mdk
samba-swat-3.0.14a-2mdk
samba-smbldap-tools-3.0.14a-2mdk
samba-vscan-clamav-3.0.14a-2mdk
samba-common-3.0.14a-2mdk
samba-doc-3.0.14a-2mdk
smbldap-tools-0.8.7-5mdk
[EMAIL PROTECTED] samba]# testparm | grep smbldap
Load smb config files from /etc/samba/smb.conf
Processing section [apps]
.
.
.
Processing section [public]
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
add user script = /usr/sbin/smbldap-useradd -m '%u'
delete user script = /usr/sbin/smbldap-userdel '%u'
add group script = /usr/sbin/smbldap-groupadd '%g'
/usr/sbin/smbldap-groupshow %g|awk '/^gidNumber:/ {print $2}'
delete group script = /usr/sbin/smbldap-groupdel '%g'
add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g'
delete user from group script = /usr/sbin/smbldap-groupmod -x
'%u' '%g'
set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'
add machine script = /usr/sbin/smbldap-useradd -w -d /dev/null
- -c 'Machine Account' -s /bin/false '%u'
Perms for these scripts are:
[EMAIL PROTECTED] samba]# ls -l /usr/sbin/smbldap-useradd
/usr/sbin/smbldap-userdel /usr/sbin/smbldap-groupadd
/usr/sbin/smbldap-groupshow /usr/sbin/smbldap-groupdel
/usr/sbin/smbldap-groupmod /usr/sbin/smbldap-groupmod
/usr/sbin/smbldap-usermod /usr/sbin/smbldap-useradd
- -rwxr-xr-x 1 root root 5379 Feb 17 01:21 /usr/sbin/smbldap-groupadd*
- -rwxr-xr-x 1 root root 2473 Feb 17 01:21 /usr/sbin/smbldap-groupdel*
- -rwxr-xr-x 1 root root 8550 Feb 17 01:21 /usr/sbin/smbldap-groupmod*
- -rwxr-xr-x 1 root root 8550 Feb 17 01:21 /usr/sbin/smbldap-groupmod*
- -rwxr-xr-x 1 root root 2009 Feb 17 01:21 /usr/sbin/smbldap-groupshow*
- -rwxr-xr-x 1 root root 17900 Feb 17 01:21 /usr/sbin/smbldap-useradd*
- -rwxr-xr-x 1 root root 17900 Feb 17 01:21 /usr/sbin/smbldap-useradd*
- -rwxr-xr-x 1 root root 3244 Feb 17 01:21 /usr/sbin/smbldap-userdel*
- -rwxr-xr-x 1 root root 18928 Feb 17 01:21 /usr/sbin/smbldap-usermod*
Other things I need verified:
Do I have the right client? I'm using Windows XP and the Active
Directory snap in for users and groups does not seem to be available.
My supposition is that it is a for-pay item. Consequently, I downloaded
the one from NT and that hasn't been working for me either. Anybody got
a clue for me here?
Jim C.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCpIpzB4AhF6wVFMERAqBuAJ98g94y4GNFRmYD9MzNY73N5uUM7gCeJ/nF
MtCd6MLvm4sFtraFiEJbd6E=
=BOq/
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Q's about bug fixes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I want to update the Mandr* TWiki PDC howto My questions are bout two old bugx. 1. There used to be a security hole in that one shouldn't put a user's profile directory in his homes share as the user could get global access this way. Is it OK to do this now? It would make backups so much easier. 2. Do LDAP users and machines still have to be in the same ou? I would like to keep Linux from seeing my machines and yet still provide them to Samba. 3. Is there a way I can find out about old bugs without having to go through all the release notes. Perhaps a bug database? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCo0IjB4AhF6wVFMERAofhAJ41J/dAuWMEwWg7e0h9BAhvsJD3VwCffg4U b8tZ9f71ZC2YPtpzo0hHcZI= =xPu5 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] SOLVED? HELP! After upgrade, can't get at my shares
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Commented this out in the homes share and the problem went away: ;hide special files = Yes What happened: 1. I rarely ever do upgrades. Since I keep good backups, I almost always do clean installs. Keeps me honest with the backups for one thing. Anyway, under these conditions Mandriva will sometimes assume that any subdirectory under /home is supposed to be a user. So what it does under the conditions of a clean install is it will create at least one user using one of these and assign that directory to them. In other words it created a user storeage (complete with mis-spelling) and assigned the /home/storeage directory to that user. This WAS my public directory assigned to nobody.nogroup. I had to change it back in order to make it available again. So anyway, that is not a Samba issue. I wish Mandriva had back-ported the Samba packages so that I wouldn't have had to cope with both an OS upgrade AND a Samba upgrade simultaneously. I think that in the future I will download the old packages first and use them after an OS upgrade for a while. 2. The line hide special files = Yes seems to be causing Samba to hide ALL files. That is why I could not access my homes share. It's definitely a bug but it is one I can life with now that I know how to get around it. Methodology for solving this was to disable the majority of the lines in the share and then enable them one at a time until the problem child was discovered. This was not a problem in 3.0.10 Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCooYYB4AhF6wVFMERAp5dAJ9OHSAWfpB5vu5kIgfnEaBHnS99qQCfcZPG QS+vhm32yQE1dvV39QXNwu4= =oC+M -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Roaming Profile Mix-Up Between Users
Hi, roaming Profiles in a mixed setup of win xp and 2000 server will get you in failures ,dont do this ( or mess with profile bugs ). What you are looking for is the %a macro. Look it up in the docs. What you want to do is put it in your path specs so that Samba will automatically put files for different Windows architectures in different locations. This will work but the down side is that you will have to set defaults for each architecture also and you will have to be careful about weather or not your netlogon scripts are architecture specific. First man smb.conf Then / which will give you a page search tool similar to the Search this page function in a GUI web browser. Then you type %a [enter] and use the n key for next. Shift+n will take you backwards. It's surprizing that so many, some of whom are quite experienced, don't know how to search a man page. I suppose it's because that information is itself something that you would have to search up in a man page. :-/ Jim C. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] HELP! After upgrade, can't get at my shares
I'm really not looking forward to downgrading because of this but if this persists much longer I'll have to. :-( Platform: MDV LE 2005 Previous version was 3.0.9 I think. Whatever the default for Mdk 10.1 Official was. samba-swat-3.0.14a-2mdk samba-smbldap-tools-3.0.14a-2mdk samba-doc-3.0.14a-2mdk samba-client-3.0.14a-2mdk samba-common-3.0.14a-2mdk samba-vscan-clamav-3.0.14a-2mdk samba-server-3.0.14a-2mdk LDAP backend. Getent works and I have no trouble logging ldap users into Linux. Commented out LDAP ACLs and that did not seem to help. smbldap-tools seems to work fine. testparm returns no errors. I've tried setting valid users = in the homes share to various things and no dice. This included commenting it out all together. The old setting was valid users = %S. Tests show the following: [EMAIL PROTECTED] ~]# smbclient -L enigma Password: Domain=[J9STARR] OS=[Unix] Server=[Samba 3.0.14a] Sharename Type Comment - --- appsDisk Application Files public Disk print$ Disk Printer Drivers IPC$IPC IPC Service (Samba 3.0.14a) ADMIN$ IPC IPC Service (Samba 3.0.14a) Domain=[J9STARR] OS=[Unix] Server=[Samba 3.0.14a] Server Comment ---- ENIGMA Samba 3.0.14a MICROTRON WorkgroupMaster ---- J9STARR ENIGMA [EMAIL PROTECTED] ~]# OK, so as a user: [EMAIL PROTECTED] njim]$ smbclient //enigma/njim Password: Domain=[J9STARR] OS=[Unix] Server=[Samba 3.0.14a] tree connect failed: NT_STATUS_ACCESS_DENIED [EMAIL PROTECTED] njim]$ Note: CUPS isn't set up yet which I think explains the print errors. Also the smbldap script paths still need adjusting in this version of my smb.conf. testparm output is: # Global parameters [global] unix charset = LOCALE workgroup = J9STARR interfaces = eth0, lo bind interfaces only = Yes passdb backend = ldapsam:ldap://localhost passwd program = /usr/bin/passwd '%u' passwd chat debug = Yes unix password sync = Yes syslog = 0 log file = /var/log/samba/%m max log size = 50 name resolve order = wins hosts bcast time server = Yes printcap name = CUPS add user script = /usr/share/samba/scripts/smbldap-useradd.pl -a -m '%u' delete user script = /usr/share/samba/scripts/smbldap-userdel.pl '%u' add group script = /usr/share/samba/scripts/smbldap-groupadd.pl -p '%g' delete group script = /usr/share/samba/scripts/smbldap-groupdel.pl '%g' add user to group script = /usr/share/samba/scripts/smbldap-groupmod.pl -m '%u' '%g' delete user from group script = /usr/share/samba/scripts/smbldap-groupmod.pl -x '%u' '%g' set primary group script = /usr/share/samba/scripts/smbldap-usermod.pl -g '%g' '%u' add machine script = /usr/share/samba/scripts/smbldap-useradd.pl -w '%u' logon script = logon.bat logon path = \\%L\profiles\%U logon drive = Z: logon home = \\%L\%U\profiles domain logons = Yes preferred master = Yes wins support = Yes ldap admin dn = cn=enigma.j9starr.net,ou=Hosts,dc=j9starr,dc=net ldap group suffix = ou=Group ldap idmap suffix = ou=Idmap ldap machine suffix = ou=People ldap suffix = dc=j9starr,dc=net ldap ssl = no ldap user suffix = ou=People idmap backend = ldap:ldap://localhost idmap uid = 1-2 idmap gid = 1-2 printer admin = root, @Domain Admins hosts allow = 192.168.2., 127. hosts deny = ALL map acl inherit = Yes print command = lpr-cups -P %p -o raw %s -r [apps] comment = Application Files path = /mnt/apps read only = No vfs objects = vscan-clamav [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon/%a guest ok = Yes browseable = No locking = No [profiles] comment = Profile Share path = /var/lib/samba/%a/profiles read only = No profile acls = Yes browseable = No root preexec = PROFILE=/var/lib/samba/%a/profiles/%u; if [ ! -e $PROFILE ]; then mkdir -pm700 $PROFILE; chown %u.%g $PROFILE; fi root postexec = /bin/su -c /usr/local/bin/dl /var/lib/samba/%a/profiles/%u/Desktop/*[^.lnk] %u recycle:repository = ../../../../../home/%U/Desktop/Trash recycle:noversions = *.doc|*.xls|*.ppt recycle:excludedir = /tmp|/temp|/cache recycle:exclude = *.tmp|*.temp|*.o|*.obj|~$*|*.~?? recycle:maxsize = 209715200 recycle:versions = Yes recycle:touch = Yes recycle:keeptree = Yes [homes] comment
[Samba] Re: HELP! After upgrade, can't get at my shares
Correction. Previous version was: 3.0.10-0.1.101mdk Previous version was 3.0.9 I think. Whatever the default for Mdk 10.1 Official was. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Dreaded homes not sharing problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I just upgraded to Mdv LE 2005 fm MDK 10.1. Sure enough, I've got the dreaded homes not sharing problem. Anybody got the answer to this? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCn9gS57L0B7uXm9oRAs/9AJ9irks7SWmCiaAAEqsYz0dr5JYq/ACfXNA/ A4tceyTN1Ued0AsBvf3ERNs= =epiP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: binding interfaces
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 So, smbd sees the new interface, but does not listen to it: I have to stop and start smbd. This is not good for me, as new interfaces are added by a cluster software which monitors if smbd is running: it should not be stopped+started only reloaded. nmbd works fine with this situation, it listens to the new interface. Any ideas how to make smbd to listen on the new interface? Krisztian My setup: interfaces = eth0, lo bind interfaces only = Yes hosts allow = 192.168.2.,127. hosts deny = ALL bind interfaces only will make the server ignore packets from any interfaces not in the interfaces list. hosts allow and hosts deny are self explanatory. They are used to deny packets based on specific IP addresses and in function are similar to tcp wrappers. Does this help? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFClKr2B4AhF6wVFMERAv2iAKCHrNTsifapCwU+W1SXL5/XKidHFgCfUKfv whbU9Zi2D2ROvFI+6ZMjFmI= =x5Tf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: binding interfaces
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 interfaces = eth0, lo bind interfaces only = Yes hosts allow = 192.168.2.,127. hosts deny = ALL bind interfaces only will make the server ignore packets from any interfaces not in the interfaces list. hosts allow and hosts deny are self explanatory. They are used to deny packets based on specific IP addresses and in function are similar to tcp wrappers. Does this help? Oh and don't forget to take down any firewalls and/or tcp wrappers if you have them. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFClL8jB4AhF6wVFMERAub2AKCDCr552xaJONOe/bcROIO2JubuugCg4+XK HqA+svtvmLGd4ihdUoeUucM= =+Ial -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba Domain Administrator
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 net groupmap modify ntgroup=Domain Admins unixgroup=root This should enable the users in the root group to be considered as domain admins by workstations, thus enabling the user root to be an administrator of all windows workstations. If you like, you can create a group like ntadmins and set that group to be Domain Admins instead of root, then you can add users to this group (I suggest to add also root to this group) so that normal users (that do not have the root password on your Linux server) can still manage the windows workstations. Whoa... I wonder why this doesn't work for me? Perhaps because I'm using an LDAP backend? Something is hosed somewhere and I never even realized it? [EMAIL PROTECTED] 0 root]$ net groupmap list | grep 'Domain Admins' Domain Admins (S-1-5-21-2147030705-2499090161-3119200592-512) - Domain Admins [EMAIL PROTECTED] 0 root]$ getent group 'Domain Admins' Domain Admins:x:512:ldap,clamav,root [EMAIL PROTECTED] 0 root]$ getent passwd | grep root root:x:0:0:root:/root:/bin/bash root:x:0:512:Netbios Domain Administrator:/mnt/home/root:/bin/bash [EMAIL PROTECTED] 0 root]$ getent group adm adm:x:4:ldap Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCk4J9B4AhF6wVFMERApjPAJ90KJLWY3FfPPnG4cCDmMrLVVAzywCg/yy9 W0GRkZGDpFBNxEVTYB0XqWE= =V3Tk -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba Domain Administrator
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 net groupmap modify ntgroup=Domain Admins unixgroup=root ... [EMAIL PROTECTED] 0 root]$ getent group adm adm:x:4:ldap OK, we got this worked out. A million thanks to John T. :-) Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFClAA+B4AhF6wVFMERAteoAJ9wMpxUEsY5XXTcS9oYqlzweDZy4QCg7mB+ rRDX2QWQm80tZnX3b+ZYQ8w= =E1c9 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: sharing NFS mounts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OK, I've been searching the archives and google with little luck... I have a directory which needs to be shared with a number of UNIX clients via NFS and with Windows clients via Samba. What is the best way to do this? Should I configure Samba to share the actual NFS mount? Or should I configure Samba to share the actual filesystem directory? Reason I ask, we were using the former method (sharing the NFS mount) and Windows users were complaining about flaky Samba shares. I think you should have your Samba daemon running on the same machine as the NFS daemon. If you do it the other way, then you have two different points of latency for file retrieval for the Samba downloads. Furthermore, what will happen if you have to take down either Samba or NFS for maintenance? This way they need not both be down. For larger systems you might consider having an SCSI hard drive with two ports so that you can access it from two different machine's busses. One machine could run Samba and the other NFS. For even larger storage solutions, think Network Attached Storage with a gigabit or fiber backbone and possibly Balancing Domain Controllers. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFClALrB4AhF6wVFMERAghWAKCBLIjWP3aNCGQ2PueV29QB/Lnx7ACfS2dn kGSrYgOljPo03YYPo2BhtME= =JG87 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: PDC Preference
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have a question, of course... We are currently running a network using samba3 with security = user , ... there are about 20 users in the domain. 1. You could migrate your postfix users to LDAP... but you knew that probably. 2. You could set up a BDC for training or practice and perhaps to test and see if it will provide advantages. Not sure if I would bother with an LDAP back-end for only 20 users though unless you have some growth projected or if you want to learn it. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFClAYlB4AhF6wVFMERAlxFAJ9M4UX/Q3SSqn88CfmHEs9G2Oc43wCaAuaK cmP0OoxsfW7nyCSSJIJL5/0= =J+ty -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: smb an NFS dir?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have /home nfs mounted from a NFS server to /home on a SMB server. ... Any help would be most appreciated, -Ben I think you would be better off by far to run both Samba and NFS on the same box, if you can. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFClAaRB4AhF6wVFMERAgIwAKDRlwp69rFEYOrRyFt1DGdp5JyN0gCg1kjv YJwBTx6I70vIV7ReR/9Tm40= =U33g -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba server crashes when logging in at XP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The only error message I can find in the log files is getpeername failed. Error was Transport endpoint is not connected and could not connect to any ldap server (after the crash). Please help me - I have looked through the configuration files many times and I really do not know WHERE to search! I would look to my LDAP back-end first for a problem like this. Try this to see if your users and groups are visible to Linux: getent passwd [some ldap username] getent group [some ldap groupname] ...and this to see if your LDAP Linux groups are mapped correctly to Windows groups: net groupmap list You might also want to check your LDAP logs and system logs for LDAP errors. Ensure that you have nscd running. Give these a try and then get back with me. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFClAtIB4AhF6wVFMERAlQJAJ9heb5Oyd0/z/StrMunWRkwVT8GfACffM/4 WC/By93k+BEUTRgsoevjjtY= =7a1z -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba Domain Administrator
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm using SAMBA version 3.0.9-2.3-SUSE as a PDC and internal mail server (few users in user list) for quite some time and so far so good for what i wanted (Domain logins, shares, users files and backups). My problem is when i need to install software or hardware on a machine (client of the domain - Windows XP Pro). As the users don't have administrator priviledges on their machines, only the administrator (of the machine) can do such things. Now, what can i do to have a domain administrator (since root is a valid user in the domain but not administrator). I've browsed through documentation but i can't seem to find what's going on. This is a little confusing. Do you want to be able to have your Domain Administrator install software on each machine? If that is the case, you will need to make the Domain Administrator ( root in this case? ) a member of each local machine's Administrators group. You might be able to do this from remote using the net command. You'll also probably need all the right passwords. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCkpLaB4AhF6wVFMERAuCCAJ47+NIeRISqkPw+ej6aJGvxsNyTzwCglpyx ZHLsYF+QOoMH3Jt/7iSN+Ts= =2cOd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Did posixGroups ever get fixed?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 As I recall, there was a problem with OpenLDAP that consisted of the fact that one couldn't specify access to the server itself through an ACL without using dn syntax. The old posixGroup did not use dn syntax. There was a new standard produced but last I new it had not yet been incorporated into the schema's. Anyway, the impact on Samba was that unless you were really good with OpenLDAP and knew how to incorporate the new posixGroup schema, you were stuck with using redundant groupOfNames objects to provide Samba users with the ability to change records. So is this fixed? Wanted: Easy step by step guide for creating a simple schema. Perhaps an address book record or something. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCi3lQB4AhF6wVFMERAvgiAKCyoI8bxPSkmblZyMorkXLphXP0xACgiwYr 9Newqupl7Ejdt+5SrZ2iXS4= =919Z -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] net command replacements for smbldap-tools
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I sure would like to see a series of net commands that could replace smbldap-tools. Wouldn't this be more appropriate for administration? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCiZquB4AhF6wVFMERAnsQAJ0XDMb3aeaSHFpVsP3s50ylIIuh6gCdHdX0 XhU4JzJQcjl/CcH3K9NC6fg= =C1JV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Domain Users group howto...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Right on! I want to see if I can replace smblap-tools with it. How does that sound? There will soon be a new chapter in the Samba-HOWTO-Collection that documents use of the 'net' command for local and remote management. - John T. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCiZtiB4AhF6wVFMERAmMtAJ9ymI2N4GFhBywtSJN8cMNbXjf3DACbBjWk GqFN6i2qnspLvqV2+oQmRJY= =jUDP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] What is good about kereberos auth?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just curious but what is so great about Kereberos authentication? Would my LDAP PDC arrangement benefit? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCdlqCB4AhF6wVFMERAvA2AJ9ZLZlQp8cWSHWdJRu7C3ZZO9+9KwCgmZKT /2QLrrhjgisoJerB0RrOpmw= =SnGr -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Mapping roaming users to local XP groups
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I have setup a network with: samba 2.2.7a on RedHat 9 and Windows XP Client, all using roaming profiles. All if working ok. My question is, how do I configure that certain users to be in the Administrator group of all PCs? Or how do I put some users to be in the Backup/LimitedUsers/etc builtin groups the Windows XP Clients? How do I do this user to Windows XP groups mapping? The standard way is to go to the console and simply add the user to the group. This is a pain though. A logon script that does the following would be best, in my humble opinion: 1. Checks to see if the user belongs to group X. 2. If not, then add that user to group X. Problem: How does one do this without having to use a password? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCbPqRB4AhF6wVFMERAh9ZAKDeBlYM1d/QQKcWBDGHq6E6qwszVACfcb8W h1SNuUF5dls3NiRISNGmN/w= =jP4K -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Help with user/domain Management fm Windows side
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | | You seem to be using a very old version of the smbldap-tools. What | version are | | you using? [crickets] Umm... Hello? [echo][echo][echo] Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCYIkz57L0B7uXm9oRAofkAKCFxmjiiRhfGwtLboCFVMidPnKL5QCeLhkk qc628NJykHom/n2BCyzV1s0= =StdP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Help with user/domain Management fm Windows side
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | You seem to be using a very old version of the smbldap-tools. What version are | you using? That's a good question. I don't know because the smbldap-tools have been packaged into the samba-server package. This is all I can find for version information: Copyright (C) 2001-2002 IDEALX | What version of Samba are you running? [EMAIL PROTECTED] 0 samba]$ smbd -V Version 3.0.10 | Have you read the Samba-3 by Example book? You can download it from: I'm pretty well versed in Samba. This is just the one thing I've never been able to get to work. Amongst other things, I want it for my website found here: http://tinyurl.com/472tl | http://www.samba.org/samba/docs/Samba-Guide.pdf | | In particular refer to chapter 6. | | - John T. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD4DBQFCXpUM57L0B7uXm9oRAqyGAJjeGMDbWiyrQZgpsFH3QtzEVSy7AJ9XZqUZ ny7I9DZmw7VeRECxbhvrQQ== =huF7 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Review Request: Samba-3 by Example Update
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | so having something like what I suggested above in the NT4 Migration chapter | is still relevant. Please John would you consider it? OOO!! Forward those to me?!? :-) Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCXy5P57L0B7uXm9oRAs6UAJ0fF6VKWzKXB2g65qB1lt9PRKpjDgCfQ/RD 72x4QAKAitUs3tTiNHqE+4Y= =qU8S -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Help with user/domain Management fm Windows side
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Back-end is LDAP. What are some good techniques for Domain management from the windows side? I've got usermgr.exe and svrmgr.exe but: 1. I don't know what functions these tools are or are not supposed to be able to perform on a Samba domain as yet. 2. I can delete users but I cannot seem to add them or modify them. ~From smb.conf: add user script = /usr/share/samba/scripts/smbldap-useradd.pl -a -m '%u' delete user script = /usr/share/samba/scripts/smbldap-userdel.pl '%u' add group script = /usr/share/samba/scripts/smbldap-groupadd.pl -p '%g' delete group script = /usr/share/samba/scripts/smbldap-groupdel.pl '%g' add user to group script = /usr/share/samba/scripts/smbldap-groupmod.pl - -m '%u' '%g' delete user from group script = /usr/share/samba/scripts/smbldap-groupmod.pl -x '%u' '%g' set primary group script = /usr/share/samba/scripts/smbldap-usermod.pl - -g '%g' '%u' add machine script = /usr/share/samba/scripts/smbldap-useradd.pl -w '%u' Any help I could get would sure be appreciated. I've got a big project coming up that will require this. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCXYHJ57L0B7uXm9oRAnMsAJ4+4kBm3BzY0MWjxA0+c8htMYhy1gCfVS5p 8StJ19PwSEg1i7QdYEXPDrc= =E2XF -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: No vscan HOWTOs?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Does anyone have ANY idea what to put in /etc/magic to identify microsoft outlook pst files? | scanning larger pst files (100 mb or so) currently raises my clamd cpu processor usage to 90% or higher, and 'locks' ms outlook on the workstation during the scan, so I'd rather not scan them and have mcafee on the workstation take care of that. | Insight would really be appreciated. Not sure why this is required. Can't you just use file [filename] to find out what mime type /etc/magic currently thinks it is? Or is it the case that the mime type actually isn't in there? Actually, I use ClamWin on the 'doze side and I was hoping that someday the developers would put in a tool for discovering if the client host was running it. I mean if it has local protection, why burn up the servers CPU cycles, right? Distributed approach for a distributed net. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCSb1H57L0B7uXm9oRArtlAJ4znZ47pFfoC6KpKas4GL+uBxTb+ACdFhFw l5jrrRQKv0d6qTPVYvmK92M= =9fIr -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: domain admins group in samba 3.0.7 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ~ What makes you think that? The command should be | net groupmap add unixgroup=whatever group name ntgroup=something | else | where the unixgroup parameter is the name of the existing unix group to | use and ntgroup is the new name that you want the group to display as in | windows. I've thought of doing this also but the problem that I have is that if I put this: net groupmap add unixgroup=whatever group name ntgroup=something | else into a logon script won't it add to the group each time the user logs in? How would duplicate entries be handled? Wouldn't I see an entry for each login or would duplicate entries be dropped? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCSJY857L0B7uXm9oRArEYAJ49LctgciKhrs6TbFrKQk5XdQ5O3QCdF9fl L5Th1gUc7suVH40h207DPoE= =o8tm -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: win xp sp2 + samba 3.0.4
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 |I have samba 3.0.4 acting as a local master browser and couple of win ... | Don't pass by please. (: Tried turning off the Firewall that comes with Service Pack 2? Run this test and if the problem goes away, you know that you need to adjust the client side firewall settings. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCSJbH57L0B7uXm9oRAivMAJ91YkwLwKdJTFLAm9h4Eg9Ax2QkQwCfVcZe gKa38LFJZVREPSLDIh72ZiI= =RHhy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: domain admins group in samba 3.0.7 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Why in gods name would you do that? The net groupmap add command is | used to configure the windows group = unixgroup mapping, much like the | username map works. You add users to the ntgroup by adding them to the | aforementioned unixgroup. Well, that's what I get for indiscriminate cut and paste. Right?;-) I'll clarify. I meant the net command on the windows side. It should accomplish more or less the same thing when applied to the local machine via a logon script right? The parameters would have to be different, of course. My bad. Sorry. If there is a better tool, (net use perhaps?) I am interested in knowing. I've no idea how to resolve the password issue (I assume there is one) for example. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCSOIw57L0B7uXm9oRAmGCAJ9JMVyhWyfuiuuZegZaFybGJUuL9wCbBT8L Xgdl5I44nUSdbfn2UpIoSh8= =Pvn2 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Need tips on clamd Anti-Virus + Samba PDC
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This is going into my HOWTO if I can figure it out. I need config info/ideas/thoughts/suggestions for setting up a clamd.conf.samba. ...or perhaps I would be better off with a per-share set of config files? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCRzmC57L0B7uXm9oRAtoeAJ9y2dQypIRjANB+je2Iam4Q7PKXXQCcDpcD I0btE+I6rvR7G056lARrnkw= =EeNa -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] No vscan HOWTOs?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Surely there must be a HOWTO out there somewhere for the vscan modules? I've been searching high and lo. Li'l Help? Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCR0wM57L0B7uXm9oRArn4AJ0ZzT1i0/vuHKtUxwcUq9NneEjh4wCcD5gs Hn8Aopf34lBd6W85fMqkeYc= =2A7X -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: No vscan HOWTOs?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [chuckle] I think I've got it working. Apparently one just has to add the clamav user to the 'Domain Admins' group so that it can do it's job. I've been googleing around and it looks like a whole lot of people are missing this, i.e. that clamav. I could use some pointers on how to be sure it is working though. I'm not seeing it in my logs, but I'm also not sure where to look. Jim C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCR1vV57L0B7uXm9oRAs+cAJ0RrLMa6Ou/RehR0dprQkK6Tjg7lgCfXz5j /Mtirt+9h7H6w3joPTw22Dc= =r98u -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Need tips on clamd Anti-Virus + Samba PDC - SOLVED
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 See the No vscan HOWTOs? thread for the resolution. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCR2LY57L0B7uXm9oRAntqAJ9u/mckQkNqg3+1gq/E6xSFf0bi6wCffkWf b0azq7qIdgCrRMCGgzPksYY= =lrtw -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] HOWTO critics wanted :-) No, seriously
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Take your best shots! ;-) Help me make this page better by telling me what is wrong. I'll even give you some tips on what I am unsatisfied with: 1. M$'s User Manager for Domains has never worked. 2. I've never been able to get virus scanning operational. http://tinyurl.com/4x3bl - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCPsgS57L0B7uXm9oRAhzpAJ9GSk95d42rGbAiQ3niHIvbedzpAACdEWWl tfX5w1XJIKI4mJ6axaTDfcQ= =5c/6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: is it possible to cut and paste linux shadow file passwd hashes to smbpasswd file?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | is it possible to cut and paste linux shadow file passwd hashes to | smbpasswd file? ...and have it work? I'm afraid not. What you need is: passwd program = /usr/bin/passwd '%u' unix password sync = Yes This way, when a user changes their password, both sets will be changed. Then what you can do have the system prompt users you already have to change them. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCOUBt57L0B7uXm9oRAh2RAKCDMi3nkAlvi+OAjRpx+6VFdjNaxwCcCqIz ymjchiaJT/sgYegB+3JUr0M= =R2dB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Where can I find more info on account flags?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul Gienger wrote: | I did a little digging around in the source, since the only web sites | I've seen would list a couple. I'd love to see a thorough discussion | myself. Here's what I've found, feel free to fill in the blanks anyone: Are you sure this is accurate? I have a regular user which I use for most things and his account flags look like this: sambaAcctFlags: [U ] According to your diagram here, that is a workstation account. If it is indeed accurate then we may have an smbldap script bug on our hands, as this is the tool I use to add users. Hmm... I'm noticeing this flag on all of them now. Wait... let me check a workstation... OK, my workstations are flagged thus: sambaAcctFlags: [W ] There is nothing defined for W below: | [NDHT U M W SLKI] | | | | | ||| | | | | | ||- Domain trust account) | | | | | |- | | | | |- | | | |- Server trust account | | |- Workstation account | |- | - User account | |||- | ||- Home dir required | |- Disabled | - | | And the following aren't listed in your group of flags: | X - password does not expire Hmmm... I wonder if there is a way to check the Windows docs instead? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCOgpo57L0B7uXm9oRAibeAJ9DJrJizVr7OSHR5OCshiTzo5G4bQCfTT3A UoXPRS4pKb9K6EmijaU8/DU= =KtGM -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Where can I find more info on account flags?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | [NDHTUMWSLKI] | ||| | ||- Domain trust account) | |- | - | |||- Server trust account | ||- Workstation account | |- | - User account | |||- | ||- Home dir required | |- Disabled | - | | And the following aren't listed in your group of flags: | X - password does not expire | Uh... Perhaps it should be more like this? I shifted it over by 2. [NDHTUMWSLKI] ~ |||- Domain trust account) ~ ||- ~ |- ~ - Server trust account ~ |||- Workstation account ~ ||- ~ |- User account ~ - ~ |||- Home dir required ~ ||- Disabled ~ |- Still not sure about the accuracy, although everything makes sense except Domain trust account. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCOg2h57L0B7uXm9oRAnz1AJ0XeCPuWD6455H7bmYx2t/9rCaiRgCfdtoJ 6K+IdHY1FksbZNkMO8mjYwY= =x4QG -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Where can I find more info on account flags?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I actually had an official samba doc I was working off of for the ones | I had filled out, but ascii art is a nightmare... I'll second that. OK, one last try without any art : [NDHTUMWSLKI] ...or N ? D Disabled H Home dir required T ? U User account M ? W Workstation account S ? L ? K ? I Domain trust account) Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCOhyX57L0B7uXm9oRAtRUAJ42FriZwjcDLJt356KDkWZkDKhR8gCfQXHT 5sbzTNUipCe2Jv268hvS+yQ= =c5QK -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Where can I find more info on account flags?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I see this in smbldap-usermod: - -HsambaAcctFlags (samba account control bits like '[NDHTUMWSLKI]') I would like to know where I can find out more about what effects these flags have on a users account. :-) Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCOTVJ57L0B7uXm9oRAlB9AJ9w0pRKInqHWbo/OFir9ZV76qMhEwCeMVXa M6V+O+J2lWGbQtLr3xhNOIU= =dyCX -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: probleman adding user
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Good Morning, | I'm adding user mdonada in the smbldap-useradd -a -m mdonada, but | probleman: | [EMAIL PROTECTED] home]# smbldap-useradd -a -m mdonada | Can't call method get_value on an undefined value at | /usr/sbin/smbldap-useradd line 170, DATA line 283. | [EMAIL PROTECTED] home]# The error message tells us the following: 1. The error is in /usr/sbin/smbldap-useradd 2. Specifically on lines 170 and line 283. Post these lines and we can be of more assistance. I'm thinking though that you've left some data out of your smbldap_conf.pm file. Some of the settings therein cannot be left blank. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCMqlY57L0B7uXm9oRAmqUAJ9YQoeVrJGRD13TYcMuGWxjZLT39ACghHqh 2B9uVp04Ovsw1JFd65Gj3qI= =/sPr -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: default user profile
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | This can be done using the NT4 Domain User Manager that is part of the | SRVTOOLS.exe package that you can download from the Microsoft web site. | Details on where to obtain this are in the book The Official Samba-3 HOWTO | and Reference Guide - check index. | | You can download this from: | http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf I've got those tools and I've never been able to get them to work. What is necessary to make them go? Don't I need a chat script or something? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCFPfz57L0B7uXm9oRApOfAJ9edLqTww3DRy5i6nu8lXX1fzCfAgCcDvo7 JeU9cX1pyWCeVpe9Zz1Sudo= =i0KA -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Windows share bridge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Hi, | I'm currently working on something quite ugly. We have a WindowsXP Home ... | little picture... Wow, that is kinda neat, but what are you sharing? There might be other things that can be done that would perform better. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCE5fM57L0B7uXm9oRAsnRAJ9hsiRMAWDJhs2n5K8n8Z5+S+okCwCfXM4C rJV2PcGMiVgZB2eoVzXY5PI= =2J2m -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Windows update
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Hi! ... | login script. The acronym for their update server is WUS?!? That is even worse than WinCE. ;-) Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCEiDw57L0B7uXm9oRAv5MAJ92bh+ROmA0JWJd/F0RvfJz4uoMYQCfQg2J aFrifFY3PkGCCB20DcJL5k0= =BvPm -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Questions about %a macro - Documentation bug.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I know that %a is for architecture. Either Samba, Windows XP, Windows 2K, Windows For Workgroups or Windows 95. I also know that %a will return WinXP when the client architecture is Windows XP. I know this because all of my current boxes are XP Pro boxes and testing it is pretty easy if you have a box of that type available. Problem is that I need to work on a backup plan for all architectures but I don't know what exactly the system will use for architectures other than WinXP. So... Will it be Win2000 or Win2K? What about Windows for Workgroups? Will it be WFW or Win3.11? Samba or smb? Etc. etc. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCBuCf57L0B7uXm9oRAp3+AJ0VBUj8zInpTsOaXZ+gAmaDNh9EZQCfVPjz ELENWe9bvRahT2/y6ZLzaC4= =V+nI -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Creating mandatory profiles (not making profiles mandatory)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | 5) make sure you are using the same version of Windows on all computers. | w2k -- xp can also break many things in profile Use %a in your path names to fix this. %a will be replaced with the architecture of your system, i.e. Win2K,WinXP,WinNT etc. etc. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCAcEL57L0B7uXm9oRAiUBAJ9zjr8eiR08/o4W3AqgfcpgeTq9nQCfd0I5 xiI7TSGlqElu+GvbaUnhEmc= =Jq4t -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: SAMBA + OPENLDAP - Getent - Please help :)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 |Yes. I have followed the instructions from the book, and I have also ... | will cost you both time and sweat .( Heck, I'd be ecstatic if I could just get a schema file patch for posixGroups that appropriately support dn syntax. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB9AZm57L0B7uXm9oRAk2AAJsFqLGNuWASZSMZ9qIX5Cv2/ghIaQCeOT6A BHNNQmehi7bBhplsKlNKji8= =3G2O -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: documentation on group profiles
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | does anyone have a good documentation regarding group profiles? The | Samba HOWTO collection only says that its possible, but I don't | understand how it works, how I can set a specific profile for a group of | users... Wow, that is an interesting topic. I, too, would love to know this. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB9ASq57L0B7uXm9oRAsWGAJ4nugMwvQYo5ZxMMshR6YpbmtM65gCcDylx bmC7HW1EmhEaIc4TALk1Tm8= =bj6b -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Using ssh for samba authentication?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I use ssh port forwarding to connect to a samba server from Windows ... | ask for any password for shares? Why not set ssh up for public key auth? Coupled with Samba's own encryption, it should be secure enough. ;-) Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB7Wgs57L0B7uXm9oRAptVAJ0XO5hOyTsvr3LGfJsjVOvUu0ln/ACfahD0 LKKCycfEbpZinPSV6JkQcK8= =HDEt -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: User in passdb, but getpwnam() fails!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I'm using Mandrake 10.0, the nsswitch.conf file is already configured, and ... | getpwnam() fails, Post the output of the appropriate testparm program. It will give folks a better idea of what they are looking at. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB7gcB57L0B7uXm9oRAu+KAJ9Ggb04sNIgWf+MMCcE2i7YAaIxZwCeNV8x T5wC5RsJJNU+EsBDvm38GtE= =2zAS -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: i cant make samba work!!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | pls help me..im very desperate...my boss is killing me everyday...thanks in advance.. Check the Secure Read-Write File and Print Server setup mentioned here. Some quick testing and validation procedures are included: http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html#id2443139 Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB6iqg57L0B7uXm9oRAlSIAKCFe8K2fGfdk1UynzUR52kZoqIQMgCbBFyg hc0SFW64FaIcZcMyz0m4dtQ= =DdKT -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: LDAP unable to add Idmap
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think either you are getting your objectClasses messed up somehow or you have a messed up schema somewhere. Post the information you are trying to add. Actually, I don't understand why this must be done at all. For me at least, Samba usually does idmaps automagically if it's settings are correct in smb.conf. |I'm trying to setup a Samba with ldap backend, I followed tha samba by |example chapter 6, followed the instcution in the book, and when it says Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB5MEk57L0B7uXm9oRAum5AKCFT0wW97WB3woi1KZstoO5luYu+gCfcCSW 6N/chSp7aSA2wGboCyEq4/A= =zeI7 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: shifting samba machine
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | We were not using LDAP at all - just flat /etc/passwd, /etc/group and ... | Perhaps I needed to port over the SID from the old PDC to the new? That will probably be a requirement. Check your /etc/samba/smbpasswd files. If they contain SID numbers then yeah. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB4zGz57L0B7uXm9oRAts2AJ98O2nMYGcJOlsgePlWC6E/kzIRkwCeJ0SW Re37NSpLbLAtK4S0GGxmrRs= =qg4T -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: shifting samba machine
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I tried this a week ago and afterward, none of the windows clients on | our network would recognize admin users (Domain admins) as actual ... | admin users. Could this have something to do with LDAP posixGroup's vrs. groupOfNames? posixGroup is outdated and cannot be used to gain access to the database itself. This means that your admins would not be able to do stuff like add/remove users but might be able to do things like delete users files and stuff. If you want admins to be database admins as well you need to add them to a groupOfNames type group also. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3yYx57L0B7uXm9oRAhTsAJ9+PsRWDxfEdkC+7UGLN1bFM3Q/cQCfZcSD dcgVk/AdH/EXLT/fd7kwZP4= =EiTe -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Smab 3 printing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Samba 3 printing does not work. Samba 2.2.x printing does work. | They are using the same smb.conf file. Any ideas? There are radical differences in functionality between the two versions. It would be better two use two different smb.conf's What do testparm and testparm3 return? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB21zk57L0B7uXm9oRAp+qAJ46axT8tdqA48DiaWtcMpo6wxHZBQCfdfnm aEsZRE3J3lm9IBJ2RvVUmpg= =nwYf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: couldn't find service netlogon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Does anybody know the reason of this error 'couldn't find service | netlogon' ? It means that either Samba or the client is expecting you to have a [netlogon] section in your smb.conf for the config that you are trying to use. If it is the client then for some reason it is not reaching the netlogon share/section. If is is Samba, then the config you are trying to use requires one. Jim C - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB0IQg57L0B7uXm9oRAsYXAJ0dsrw+V+gWOPMyPfQoVwrM7blLiQCeJwjq leVM96cU9vgPrE3T81Xxz6I= =9qsH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: domain administrator is always mapped to root
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | root is root (Unix admin, Domain admin). tango is tango (NOT an Unix | admin, but Domain admin). Is there a technical necessity of mapping | tango to root? I surmise that in order to properly emulate Windows behavior Samba must do some of these things that we *nix guys find pesky. I imagine that the only way around this behaviour would probably include coming up with a special PAM module and that may be outside the scope of the Samba project. Otherwise you are going to need to be able to do root things like change passwords, delete users and stuff. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBzF1v57L0B7uXm9oRAs9rAJwJU0hmDHOdqGtWoeSNZ2XXYdDKJQCfaKWe 4zO74GZ30AyIDHYEt3pKy38= =4t7v -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: getent not working
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ~ [2004/12/22 20:35:09, 1] nsswitch/winbindd.c:main(864) | winbindd version 3.0.10-1.fc3 started. ... | Any ideas as to what is going on? I have nsswitch.conf configured | with both the password and group entries to look at winbind. Just a guess but it sounds to me like it is complaining about uid values that are to high, i.e. more than 2. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBykLT57L0B7uXm9oRApeUAJ0eeoMJ9WBqfczehlhhZYjzIVlHYQCdFHMo 7pXb17kZrsmrtFaLJHModd8= =DOiH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Shares With Spaces
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | You've probably tried this but what about: | //share/with\ spaces | | Jim C. | | Yes, I've tried it too but it didn't recognize the line where i put the | share What about //share/with%20spaces ? - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFByFw857L0B7uXm9oRAidSAJ0R6T9HYZ+BL6K2QmRTXWv/cftn9wCff95U cgniQxi6zfIF+0QB1sEMNu8= =0Gzy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Shares With Spaces
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I'm having a bit of troble to mount shares with space | something like: | //server/share space | i tryied using the sharename in and '' | and no luck | I have no problems using - mount -t smbfs //share/with spaces | /path/to/mount -o username. | and in fstab how to I use it? | Uou, a great question... i didn't find how to... :( sorry You've probably tried this but what about: //share/with\ spaces Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBx67H57L0B7uXm9oRAntiAJ49xdI1vxilwRNLaX/hmtUde/jShgCcCUNq pd89gv54huINsemApobObpA= =4LRq -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Can the logon script know username?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Type 'set' in any dos window to see the list of environment variables for a windows user. Pay particular attention to %USERNAME%. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBx69b57L0B7uXm9oRAlDAAJ9at2dEUxjspe6fy8f+87V/Unj7CACeI4Gm /KZxs5ScUT7HHljEJAx4rzc= =BX3v -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba-HOWTO-Collection/StandAloneServer.html#simplynice
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | After reading smb.conf the option passdb backend = guest looks wrong? | guest isnt listed as a possibility in the manpage. | Ive changed nothing in my passwd/smbpasswd file. | Why is it not working? passdb backend tells samba where to find it's records. You need to read up on this. http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBxJBr57L0B7uXm9oRAlWBAJ9JZPkLKqonhFyrMsu8S3x+hU/9BQCeNCmp 9yutCrXH38CMx87PhoCi8ro= =FLPR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: ldap machine suffix fixed?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OK, so what I am hearing is that: 1. It is still a problem. 2. But it isn't a Samba problem, it is an nss_ldap problem. 3. There might be some work arounds. Possible workarounds: A. Burry the Two OU's one deeper and do a subtree search on the parent OU. Works but not scaleable. B. Add filter keyword to uh... Is it /etc/ldap.conf or nss_switch.conf? Syntax? Am I in the right ballpark here? :-) Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwoPU57L0B7uXm9oRAvFRAJ49HG+hh+tVITu09dPBqRyPvGmOzQCeL7Xy 2JbBI6+wWIlLhJrp+QxRgAs= =2WmN -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Way to salvage profiles after domain rejoin?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I take it that the SID does not actually change (from ... | I didn't do something wrong or neglect something. Don't forget to change the SID in any scripts that you are using also. smbldap-tools for example. Might also want to chech and see what SID's are in any user records you've created recently. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwoq157L0B7uXm9oRAiBVAKCB5krP2RXdbQFVwulYXOs1Qc58AwCeMd3h 0wan1rHlVXziXHkzXZB59aw= =h4TG -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ldap machine suffix fixed?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwTUA57L0B7uXm9oRApk/AJ4jli1ZX+T93+4L8LSg61HAN33+gACfXZJX TomDrFYSkmJPsYzL8fHVbHo= =btwE -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Managing users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Since there is a big silence about this, I was going to skip this ... | WinNT and Win2000 have no problems. I'll have to test WinXP. I've never been able to get this to work. Sure would like some help on this topic. It is almost as if I have the wrong client or something. I'm on WinXPro. ~ If you are absolutely sure you know where exactly the right client usermangaer software is, email me a link. After I can be certain I have the right one, I'll start debugging. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBv0QP57L0B7uXm9oRAohpAJ4gqoqYXt4qi8/wOA5PX8DBL7Jh4ACbBIyR HFlmkLA0CsCSK+yPdV5huIU= =4ukr -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Problem moving Samba shares to newly installed drive
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel wrote: | Hello, | | I have been working on a RedHat machine that is a PDC for a Windows network | running XP clients. | | The system has the following shares defined in /etc/samba/smb.conf: | | /home/netlogon | /home/profiles | /public (FYI /public is a symbolic link to /home/public) | /home/share1 | /home/share2 | | They are all on the /home partition which is on the main system drive, which | is full. | | I have installed a second drive, made an ext2 file system, and mounted the | drive as 1 large partition called /share. | | I then copied all the data from the /home partition to the /share drive via | ( cp -R /home/* /share ). Couple of points. 1. It sounds like maybe you are combining profiles and home directories. ~ I remember hearing that this is a bad idea for security reasons. I'm sorry, though. I can't remember the specifics. 2. Use -pR on your copy. Where p stands for preserve ownerships and permissions. Alternatively, think about using mv instead. If I am not mistaken, it doesn't mess with the perms. As for the rest, it is hard to tell. If you can get back to square 1 and start over, it would be best. This would include removing the extra smb.conf files to your root directory (i.e. someplace out of the way) at least. As far as I know, samba has one and only one configuration file although I think sub-configuration files *can* be specified within it. Still I'm pretty sure that if you had done this, you would know. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD4DBQFBv3/o57L0B7uXm9oRAqDMAJ9P+WxhJ+rd00cYVaonGpLfP+MkLACYrr+j XVyAEHTivA+EbMtOZ2yF7w== =jNUh -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] CUPS + Adobe 9x/ME drivers How?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I want CUPS drivers available for the XP/NT/2K but Adobe drivers available for the same printer for my 95/98/ME clients. How can I make cupsaddsmb (or is there another way?) do this? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBv22U57L0B7uXm9oRAqe4AJsEG5iCfn7hR1wseVzTrL2f/5YorACeJlb5 jNCoOpjRDNWqc3D0GD0qZ2I= =OaaP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Managing users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim C. wrote: | | Since there is a big silence about this, I was going to skip this | ... | | WinNT and Win2000 have no problems. I'll have to test WinXP. | I've never been able to get this to work. Sure would like some help on | this topic. | It is almost as if I have the wrong client or something. I'm on WinXPro. | ~ If you are absolutely sure you know where exactly the right client | usermangaer software is, email me a link. After I can be certain I have | the right one, I'll start debugging. | Jim C. Eureka! I just got it to delete a user, albeit with an error. I've been messing with Samba PDC's for 2-3 years now and that is the first time I've ever gotten usermanager to do anything. Odd... I don't see anything of use in the logs at log level 10 :-( Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBv1IF57L0B7uXm9oRAsm2AKCILnjRb+geqBper+QmFw379pFw8QCeLfVN CqW7vgzkPWTsTzylR9XQOTQ= =uiqt -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Followed John's book, frustrating smbldap-problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Rolf A. Vaglid wrote: ... | I've uploaded two tcpdump-files for those up for a challenge: | http://www.tysvernett.no/smbldap/login_attempt_w2000.tcpdump | http://www.tysvernett.no/smbldap/login_win98.tcpdump | | Cheers | Rolf (Would sacrifice a finger to solve this one) List of ideas you can try: 1. Shutdown all firewalls. 2. See 1 above. ;-) 3. Try manually creating the test users profile directory if they are not already in existence. Make sure the file system perms and ownerships are correct for the test user. 4. Try just browsing to one of the shares and see if you can access it with a userid and password but without joining the domain. You may have to use DOMAIN/\Testuser (I always forget which slash is correct). 5. Post your smb.conf along with the results of 'ls -l [samba's directories]'. 6. Use smbldap-usershow to look at the test user carefully. 7. Try turning off any ldap acls and attempt a login. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBv3G/57L0B7uXm9oRAsFUAJ9GeTiSuSNYoD1NJsDCdoxizn88qgCeOybm irX9dvKmo3rkiuQ/DXvrlsM= =gk42 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: PDC, BDCs - how do you synchronize roaming profiles?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Argh! You are correct. I thought this was the one really good article that Buchan Milne wrote. It seems to have disapeared. | http://linsec.ca/bin/view/Main/LdapAdvanced | NO, this article is about LDAP mainly, and says nothing about | replicating/synchronizing profiles/data/files. | Tomek Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBvBG657L0B7uXm9oRAkY3AJ9blmu6Q7ZGVCAwpu+jGilObYSeAgCfRyUI fAJ/IzpMXWVhA7vGa5mZHXU= =oi0a -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: PDC, BDCs - how do you synchronize roaming profiles?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tomasz Chmielewski wrote: | Hello, Thinking out loud hmmm Small storeage area network? Gigabit ethernet might be cheap enough. Perhaps you could create a Gigabit backbone and basically do a mirror setup? Would RAID help? Have you been thinking of a backup solution? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBvSwk57L0B7uXm9oRAiRgAJ9rD4Rgl7fWD8y3Pcn01S+/U0odNQCeLSRM YSKY74yJ7igVjfFWXMHAlio= =qQpg -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: PDC, BDCs - how do you synchronize roaming profiles?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Or perhaps I don't understand something? Just a guess but a BDC is probably going to do the same thing with the files that the LDAP backend would do. I.E. replicate the data from the server. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFButk657L0B7uXm9oRAm4TAJ9FbHfSVOMwBXgmLNe+2d3/hDP6kwCeONlC hejNa02+f9eAkCGwyERz15I= =csYH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Loglevel question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 What are the different classes? The docs list only 3 but are there more? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFButiq57L0B7uXm9oRAg3kAJ9P2T7vJofLZ9zeGM1KxgQLDxRrgACdEdZ2 089Wy7cVuaS6c5PxTiSfl14= =ljG1 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: %a - Supporting Multiple Windows OS's
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: | Craig White wrote: | | | can we now use %u and/or %U in LDAP sambaHomePath | | and sambaProfilePath ? | Not currently. What about %USERNAME% instead? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFButhi57L0B7uXm9oRAmgOAJ0bDq8rz0ARsRkOQYAvzTQQKfygBACZAa5N fgcVdrXA1xsS/0TJwSAFK90= =fQ8E -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Contribution to the docs. Was: Loglevel question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim C. wrote: | What are the different classes? The docs list only 3 but are there more? According to smbclient set to debug level 10: INFO: Current debug levels: ~ all: True/10 ~ tdb: False/0 ~ printdrivers: False/0 ~ lanman: False/0 ~ smb: False/0 ~ rpc_parse: False/0 ~ rpc_srv: False/0 ~ rpc_cli: False/0 ~ passdb: False/0 ~ sam: False/0 ~ auth: False/0 ~ winbind: False/0 ~ vfs: False/0 ~ idmap: False/0 ~ quota: False/0 ~ acls: False/0 This info sure would be handy to know. I've been looking for it since I first started using Samba 3.x Anybody know where I can find out what each of these relates to? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBu2/A57L0B7uXm9oRAmjNAJ97kDavFLVthwWNntiQ5LxepR21cQCgg0hE 33Zw42RuaLwl1o0p5JfTVLc= =pVS8 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Cannot delete printer driver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | [EMAIL PROTECTED] 0 3]$ rpcclient enigma -U 'root%XX' -c 'enumdrivers' | | [Windows NT x86] | Printer Driver Info 1: | Driver Name: [Lexmark Z53 Color Jetprinter] | | | [Windows NT x86] | Printer Driver Info 1: | Driver Name: [Lexmark Z53 Color Jetprinter] | | [EMAIL PROTECTED] 0 3]$ rpcclient enigma -U 'root%X' -c 'deldriver' | Usage: deldriver driver | [EMAIL PROTECTED] 0 3]$ rpcclient enigma -U 'root%XX' -c 'deldriver Lexmark\ Z53\ Color\ Jetprinter' | Failed to remove driver Lexmark Z53 Color Jetprinter for arch [Windows NT x86] - error 0xbb9! | Failed to remove driver Lexmark Z53 Color Jetprinter for arch [Windows NT x86] - error 0xbb9! | result was WERR_UNKNOWN_PRINTER_DRIVER | [EMAIL PROTECTED] 0 3]$ ls | LXAUALG4.OUT LXAUCLN6.OUT LXAUICUR.DLL LXAUSDRV.INI LXAUSRES.DLL UNIDRV.DLLUNIRES.DLL | LXAUALG6.OUT LXAUCLR.DLL LXAULIC.TXT LXAUSPSZ.GPD LXAUSUI.DLL UNIDRV.HLP | LXAUCLN4.OUT LXAUFCIC.DLL LXAUSDRV.GPD LXAUSRDR.DLL STDNAMES.GPD UNIDRVUI.DLL | [EMAIL PROTECTED] 0 3]$ rpcclient enigma -U 'root%XX' -c deldriver Lexmark\ Z53\ Color\ Jetprinter | Failed to remove driver Lexmark Z53 Color Jetprinter for arch [Windows NT x86] - error 0xbb9! | Failed to remove driver Lexmark Z53 Color Jetprinter for arch [Windows NT x86] - error 0xbb9! | result was WERR_UNKNOWN_PRINTER_DRIVER | [EMAIL PROTECTED] 0 3]$ Anybody got any ideas? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBuXSv57L0B7uXm9oRAiOiAJwNH+PFSENgwLsNWG6FQHPcnq0KIACfUPhd BX25DoLt5BHosT5Ng2qL6Ig= =IJW8 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] %a - Supporting Multiple Windows OS's
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 So I can dig that %a can be used in a user's profile directory spec to specify a subdirectory for Windows architecture. What I need are some tips for setting up a Default User for each architecture. Man would it be cool if I could set this up! :-) Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBuilR57L0B7uXm9oRAoH9AJkB6YdbknirjnDnxSAPGpvjcGeNGACdFBev UlWal3foyU8H/Tfj2v804bw= =Xxvk -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Cannot get DOMAIN ADMINS to work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | After reading a lot in the mailing list and the official Samba 3 howto, | i am still unable to give domain admin rights to a user, so that he gets | admin rights on all workstations in the domain. | | Here is what i have: 1. If you are using ldap, you should know that the posixgroup objectClass is out of date and that you will need a different objectClass to provide Administrative access to the LDAP database itself. Specifically, groupOfNames. 2. I think you may be approaching this wrong. I have to assume that you are using something that actually has such a group so perhaps that means XP. On XP Pro: Right click on the Start button and select Properties. Select the Customize button. Select the Advanced tab. Navigate to the Control Panel item. Select the Display as menu radio button. After having made these changes, you will then find that you can Navigate to the Control panel using the start menu and right-click on the Control Panel menu items. This also means that you can use the runas context menu item to run them as an Administrator. I don't know if this works on NT/2K but you might consider looking for something similar. The advantage of this technique is that your user remains just a user. You get what you need when you need it but not what you don't making your system much more secure. The function of runas is similar in nature to something like kdesu. It is very handy indeed once you get used to it. 3. I remember researching ways to upgrade my user to Administrative group membership using a command line technique. Since I know this can be done, I also know that it can be incorporated into a simple command line login script. What such a script should do is: A. Check to see if the current user is a member of the local Administrators group. B. If no, use the runas facility and add them otherwise exit. For efficiency, you might consider using groups instead. Samba does not support groups as members of groups but your local machine probably will. Thus you could write you script so that it adds the remote group Domain Users to the local group Administrators. It is just my opinion but I would use the techniques mentioned in #2 coupled with #3 but only in regards to the Power Users group, just to make life easier. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBujJi57L0B7uXm9oRAiq/AJ91SjG1FFK2TeJWV+mrDDwdCDGwoACeOqze yf6oCz/5EygbOxjw2+kQLPU= =t0Gn -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Cannot delete printer driver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | | | [EMAIL PROTECTED] 0 3]$ rpcclient enigma -U 'root%X' -c 'deldriver' | | | Usage: deldriver driver | | | [EMAIL PROTECTED] 0 3]$ rpcclient enigma -U 'root%XX' -c 'deldriver | | Lexmark\ Z53\ Color\ Jetprinter' | | | Failed to remove driver Lexmark Z53 Color Jetprinter for arch [Windows | | NT x86] - error 0xbb9! | | ~From include/doserr.h: | | #define ERRprinterdriverinuse 3001 Thanks Gerald! As far as I know the printer driver is not in use, though. Can anyone tell me how to force Samba to change the in use flag or provide some other means for forcing deletion? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBuffQ57L0B7uXm9oRAogYAJ9qtPuPxU/i3U76jCiJAlZnq4NxcwCeICdr bzUMaC9JfdjRrkKMvO1hwVY= =/z9r -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Removing printers and faxes folder from windows explorer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Does anyone know how to make Printers and faxes folder not showing up | in all | client's Windows Explorer. | | I have tried to not include a [printers] section. I have also included | a [printers] section but make browseable = no | I have also tried load printers = no Tried this? show add printer wizard = No - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBt2MD57L0B7uXm9oRAvgJAJ47gTqT6YGcyaP2AcYRow2k4vwLawCfQWmy RqhSVQg/1lmaHbxEJuLKFtI= =P25u -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Trouble with spaces in group names
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Testparm output: [print$] ~comment = Printer Drivers ~path = /var/lib/samba/printers ~write list = root, @'Domain, Admins' ~read only = No That comma seems to keep introduceing itself into 'Domain Admins' no matter how I write it. Help? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBtjiP57L0B7uXm9oRAroeAKCFi2bq1zna5WbrCuUrkWAX4MgODwCfTJ70 58qR+wY4heIoJ0BrS5Ow188= =VZKu -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Printer driver auto upload.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I have a third party file manager that I use to get Administrator access
to XP just like you can with konqeror. It is called FileAnt and it
totally rocks... but I digress.
I've noticed that I can't browse to my print$ share despite the
following settings:
| [printers]
| comment = All Printers
| path = /var/spool/samba
| printer admin = root
| guest ok = Yes
| printable = Yes
| browseable = No
|
| [print$]
| comment = Printer Drivers
| path = /var/lib/samba/printers
| read only = No
Here is what is especially strange. If I click on the printer icon with
FileAnt I get this:
\\Enigma\::{2227A280-3AEA-1069-A2DE-08002B30309D}
Enigma is the name of my server but what is the SID type info for?
If I paste it into an explorer box I get the printers subdirectory also.
Q: Is the printers subdirectory synonymous with \\Enigma\printer$ ? If
this is the case than I am actually browseing it however I can still not
create a directory despite the settings above.
I've also noticed something else strange with the perms:
| [EMAIL PROTECTED] 0 samba]$ ls -l printers
| total 20
| drwxrwsr-x 2 root adm 4096 Nov 9 12:35 W32ALPHA
| drwxrwsr-x 2 root adm 4096 Nov 9 12:35 W32MIPS
| drwxrwsr-x 2 root adm 4096 Nov 9 12:35 W32PPC
| drwxrwsr-x 3 root adm 4096 Dec 6 19:33 W32X86
| drwxrwsr-x 2 root adm 4096 Nov 9 12:35 WIN40
| [EMAIL PROTECTED] 0 samba]$
What is the S for? Somehow I doubt it is supposed to be there.
Last problem (that I know of) is that my admin users are all members of
a group called 'Domain Admins' but when I try to add this group to the
write list I get messed up output from testparm:
|write list = root, @'Domain, Admins'
The comma definately does not belong. Is this a cowinkydink of testparm
or will it actually be interpreted this way?
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 |
|---|
| Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBtkHg57L0B7uXm9oRAryVAJ9My/H/gK+U0s3FARlNaTxQLd/WGwCfYE1X
DIyuYY/NFXv+4/kw0Z0l3jY=
=yfFZ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Roaming profiles - exclude Application Data from roaming profile
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I have a problem with my roaming profiles where they are becoming too | large due to the Thunderbird mail accounts (stored by default) in | Application Data. What I would like to do is exclude this directory from | being part of the roaming profile. How can I do this? | | Also, how hard is it to have some users not use a roaming profile but | others continuing to use a roaming profile? We have some laptop users | that don't need roaming but office staff which do benefit from the use | of roaming profiles. Options: 1. If you haven't already implemented folder redirection for Application ~ Data and My Documents, you may want to seriously consider it. This will allow you to maintain the info on the server without having to download the whole thing each time a user logs in. See: http://mandrake.vmlinuz.ca/bin/view/Main/SambaThreeDomainController#Performance_Issues Mine uses the above in conjunction with a mapped drive that points at the users home directory. Cool thing about this is that a sneaky dude can use this to share email between a Windows Thunderbird client and a Linux Thunderbird client. That's how I got mine set up although it is a bit tricky. 2. You can manually change the directories from within Thunderbird to a directory that is local. The user will not be able to access his or her mail on other machines of course. For example, one might create a subdirectory of C:\Documents and Settings\All Users\Documents\Application Data\[username]\Thunderbird and keep all of Thunderbird's stuff here. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBtlMO57L0B7uXm9oRAm4nAJ0RVZET+rv73lRWXcSgm5oOtJ7bQgCdEou4 jECJTcJUWOlg0o0rLBa3lkk= =rgAn -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Installing Printer drivers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've a Samba PDC ( samba-server-3.0.6-4.2.100mdk ) My cleint machines are all XP Pro without SP2. I've never been able to get Samba to accept a printer driver for download to client machines. How can I achieve this? Note that this will not be an easy question to answer. I've already succeeded at installing pass-through printing and CUPS printing but both suck. I suppose it is CUPS that actually sux. Anyway, I want my printer to work identically to a Windows printer, i.e. users should be able to manipulate properties etc. If I can get help figureing this one out, I'll be very happy to add it to my HOWTO at http://mandrake.vmlinuz.ca/bin/view/Main/SambaThreeDomainController Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBtN5d57L0B7uXm9oRAs8LAJ0R7DtkhaiHgJD5XlVrP+FsmFLyQwCfTqo8 SrMJsej2kWaiLagvmCrtRIQ= =2UX2 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Installing Printer drivers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim C. wrote: | I've a Samba PDC ( samba-server-3.0.6-4.2.100mdk ) My cleint machines ... To be more specific about what I want: I want rendering done on the client side with the windows printer drivers downloaded from the DC. I want to be able to install those printer drivers from any box, so long as I am logged into the DC as an Admin user. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBtOZp57L0B7uXm9oRAo7kAJ0dphkpLhNO0FobrMpmG6BhsXvPQwCdGfsj hEkEax3dFlm4+DAMbizYijE= =TY7b -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] help identifying errors
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
This from tail -f /var/log/samba/spartack
| spartack (192.168.2.102) couldn't find service
::{2227a280-3aea-1069-a2de-08002b30309d}
| [2004/12/06 16:18:46, 1] smbd/service.c:make_connection_snum(648)
| spartack (192.168.2.102) connect to service print$ initially as user
root (uid=0, gid=0) (pid 3004)
| [2004/12/06 16:18:46, 1] smbd/service.c:close_cnum(837)
| spartack (192.168.2.102) closed connection to service print$
| [2004/12/06 16:18:46, 1] smbd/service.c:make_connection_snum(648)
| spartack (192.168.2.102) connect to service print$ initially as user
root (uid=0, gid=0) (pid 3004)
| [2004/12/06 16:18:46, 1] smbd/service.c:close_cnum(837)
| spartack (192.168.2.102) closed connection to service print$
| [2004/12/06 16:18:46, 0] smbd/service.c:make_connection(800)
Spartack is the name of one of my clients.
What I am trying to do is move from using the generic postscript printer
drivers to using the Windows printer drivers and having them
downloadble. I can get them to upload but at the end of the upload it
says Access denied
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 |
|---|
| Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBtPgS57L0B7uXm9oRAsg7AJ4rW7P5W2iIqh39+UE8pvKJsvtiXgCcCvoO
pi+yF0zGrLEHBTAW20mTIWo=
=1HFb
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: How do I stop the guest account printing?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | The samba server is used by several people, not all of whom have ... | Windows SMB design? Tried this?: invalid users = guest Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBtSsQ57L0B7uXm9oRAvapAJ0WuPS3qUILvToBlD1kjjHpNmG9pgCfYgUH qp0f1MyWxapTOFLgEMT8qaU= =eaLc -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Migrating to samba 3.07
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Melvin Wong wrote: | Hi, | I am currently migrating my current samba 2.x PDC without ldap backend to a new machine running samba 3.07 PDC with ldap backend. On the new machine, I have managed to setup samba 3.07 PDC with ldap backend successfully under a new domain name. The problem now is how do I migrate all the users profiles, smbpasswd etc. and be transparent to the users at the same time to the new PDC. Is there any tools available? I have also forgot to set the domain sid to the old one, so it there anyway to change all the sid to the old sid? My users have their profiles set as local in their PC and when I changed the new PDC domain name to the old domain name, a new profile is created instead of recognizing their local profile. Really appreciate if someone can help me in this. Thanks! | | melvin I believe net setlocalsid [SID goes here] is what you are looking for. As for the profiles, I don't think any migration will be required. Wasn't for mine. Jim C - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBlRHE57L0B7uXm9oRAka5AJ9ugsXwAJu7XfFAqbA1pjOdjbPwZgCfczvl f4BGhyy2Q0YQtE3dM0qSRIY= =ekUh -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Logon fails due to The system cannot find the file specified
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adam Tauno Williams wrote: | I have a couple of Windows 2000 boxes that only accept logons from users ... | Would be nice if it just came out and said which file couldn't be | found. :) Well, I know your probably a shaper guy than me when it comes to this kind of stuff but here goes... Checked for differences in underlying file system permissions between old user profiles and new user profiles? Have you tried createing a profile directory manually? Are the profiles being created at all? Can you post the testparm output for the profiles and profdata shares? Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBlRhc57L0B7uXm9oRAg+yAJ0e1PdUbvZwYBsYVztfeyIrVTd3twCfSa67 X+A6vhrVCAna/Mnf5kfikNQ= =zF1Y -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Logon fails due to The system cannot find the file specified
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adam Tauno Williams wrote: | I have a couple of Windows 2000 boxes that only accept logons from users ... | found. :) Logically, there has to be something different between the old users and the new ones. Because there are some users for whom the samba config works, I would tend to rule that out as a source of trouble. Here are some other ideas. Log into a Windows machine as one of the old users and open a dos prompt window. Type set (this is equivalent to typeing env on a unix box) and have a look at the user's environment variables to see if they are what you would expect. You could also compare the sambaHomePath and sambaProfilePath settings between old and new user records, as well as the logon path and logon home settings in smb.conf and see if they jive with what you had in mind. If not, then you need to check what ever script setup you are using to add users. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBlR0c57L0B7uXm9oRAu+mAJ0Y6wu/fzchCoeyUDJ2Q6FZNQOS4QCffDpN 3nFppSh9IgWSHq7WNmoNB20= =mSPZ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: How to add samba admins in local admin group of workstations
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I need to add admin users of my samba PDC, to local admin of my windows | clients workstations. How to i do it? Depends on what backend you are using. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBlR1q57L0B7uXm9oRAuMkAJ4z+C+qSCSM97CMHWXsrtLWZWTCZACfcKN2 SClnSeCgARxgXTwqSWmpOvc= =TpMN -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Improper link handling?
Samba supports links now, right? I was recently experimenting with a setup for cross-platform access to a user's FireFox bookmarks. Unfortunately, FireFox overwrites the link to the bookmarks file on exit. How is this possible if Samba is interpreting the link correctly? Shouldn't the file that the bookmarks link points to be overwritten instead? Both the link and the file are on the same share and it is described as follows: samba-server-3.0.6-4.1.100mdk [homes] comment = Home Directories valid users = %S read only = No hide special files = Yes browseable = No vfs objects = recycle recycle:repository = ./Desktop/Trash recycle:noversions = *.doc|*.xls|*.ppt recycle:excludedir = /tmp|/temp|/cache recycle:exclude = *.tmp|*.temp|*.o|*.obj|~$*|*.~?? recycle:maxsize = 0 recycle:versions = Yes recycle:touch = Yes recycle:keeptree = Yes Jim C. -- - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: SAMBA PDC
Excuse me for lating answear, but I am ill now and have no possibillity to test this. If I am feeling better tommorow, I will test it. I hope you will be feeling better soon. I also hope that my latest advice is of some use to you as I've not encountered anything else that would cause this kind of trouble. Jim C. -- - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba + LDAP PDC on Gentoo
Has anyone got this setup running? Can you point me to a HOWTO? Mine works but I don't use Gentoo. I'm stuck with a problem in smbldap_tools.pm when I do any kind of basic thing. I keep getting this error: == vulcan root # smbldap-usershow.pl Administrator Can't call method search on an undefined value at /usr/lib/perl5/5.8.4/i686-linux/smbldap_tools.pm line 595. Post your smbldap_tools.pm and make sure you XX out any passwords. For smbldap tools have a look at: http://mandrake.vmlinuz.ca/bin/view/Main/SambaThreeDomainController#Install_and_Configure_Idealx_SMB This may be enlightening but it is for Mandrake not Gentoo. Jim C. -- - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: SAMBA PDC
Just delete the values for these two and then give it a try. GQ is good for this. I believe these can be set using smbldap-tools but as I recall, the tools will not accept a blank setting which is what you probably need if you want the default settings in smb.conf: sambaProfilePath: \\PDC\profiles\yyovkov sambaHomePath: \\PDC\homes Jim C. -- - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
